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1 TITLE OF THE INVENTION 

Apparatus of a flexible protection of ISMA media streams using MPEG-4 IPMP 
Extension 

2 WHAT IS CLAIMED IS: 

(1) Apparatus of a flexible protection of ISMA media str^s^^M^^ ff MP 
Extension, on ISMA content provider side, comprising the following steps of. 

Embed Tool List Descriptor into IOD to indicate a list of IPMP tools required to 
process the content. 

One of the tools specified in the Tool List has a tool ID which was assigned to 
ISMACryp decryption tool. 

One of the tools specified in the Tool List has a tool ID which was assigned to 
KMS (Key Management System) tool. 

Presence of any one of the above mentioned two tools signals the presence of 
ISMACryp protection. 

(1) Apparatus of a flexible protection of ISMA media streams using MPBG-4 MP 
&Son on ISMA content provider side, where signalling ISMACryp 
pSon using Tool List in IOD in claim (1), further comprising the followmg 



Embed IPMP Descriptor Pointer in the ES Descriptor of a media stream to 
indicate the media stream is protected. 

The IPMP Descriptor referenced by the above said IPMP Descriptor Pointer has a 
tool ID of the ISMACryp decryption tool. 
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(3) Apparatus of a flexible protection of ISMA media streams usmg MPEG-4 IPMP 
Extension, on ISMA content provider side, comprising the Mowing steps of: 

Carry ISMACryp parameters in ISMACryp_Data which extends from 
IPMP_Data_BaseClass. 

Carry ISMACryp_Data in IPMP Descriptor which is subsequently carried in OD. 

(4) Apparatus of a flexible protection of ISMA media streams using MPEG-4 IPMP 
Extension, on ISMA content provider side, comprising the following steps of: 

Carry ISMACryp parameters in ISMACryp_Data which extends from 
n>MP_Data_BaseClass. 

Carry ISMACryp JData in n»MP_Message which is subsequently carried in IPMP 
Stream. 

3 DETAILED DESCRWTTON OF THE INVENTION 

3.1 Industrial Field of Utilization 

The presented invention aims to provide MPEG-4 IPMP Extension ^^f 1 ^ 0 " *° 
the ISMA protection framework. With the given invennon adopted, ISMA protection 
framework is able to achieve interoperability with MPEG-4 IPMP Extension compatible 
receivers. 

3.2 Background and Prior Art 

For several years, the promise of delivering video and audio over the Internet has been 
widely promoted in the media content distribution industry. Many standard groups have put 
u-emendous efforts to provide solutions towards this issue. Internet Streaming Media 
Alliance (ISMA) is one of such groups. It addresses this need by setting forth a framework 
for the use of existing open standards that vendors can use to build interoperable video and 
audio systems for use in IP framework and Internet. Its specification assumes the use of 
existing MPEG technologies and mainly focus on MPEG-4 technologies at the current stage, 
mough future adaptation and revisions may include MPEG-2 andMPEG-7 technologies. 

ISMA also defines a cryptographic framework, namely ISMACryp, for ISMA media 
streams This framework is extensible to new media encodings, can be. upgraded to new 
cryptographic transforms, and is applicable to a variety of key management, security or 
digital rights management (DRM)) systems. It also defines a default encryption of media 
streams and authentication of media messages for ISMA specification. Figure.l gives the 
architecture diagram of ISMACrpt protection over the ISMA framework. 

As ISMA declares, two types of receivers are targeted, namely, ISMA-only receivers and 
MPEG system-capable receivers. "ISMA-only" receivers are defined here as receivers that 
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are not MPEG-4 system capable, i.e., cannot process the MPEG-4 signalling «d control 
stream's that ca P n accompany any MPEG-4 ° * 

contrary "MPEG system-capable receivers" can process * e , .^^^1'?^ 
^rSonas well as ISMA related information. The interoperability with MPEG system- 
^StoZSmL achieved through MPEG IOD (Initial Object Description) ttat conveys 
SJi l^SU^ signalling. ThelOD is included as abmary SDP 
(Session Description Protocol) attribute, i.e., SDP V™ 



ISMACryp is also applicable to both types of receivers. It extends me bin^ IOD msid^e ihe 
S£K£ t£ new signalling offers an asymmetry rather 

ISMA signalling: It provides "Minimal" and "Base" ugnaUing parameters of the SDP IOD 
ZmriSL received mtetoperability with MPEG-4 IPMP system. 

However, the current ISMACryp defined extension to IOD is not complete .and I** 

with latest MPEG-4 IPMP Extension standard. This results 
3 not be correctly recognizable by MPEG-4 IPMP Extension compatible receiver. For 
Znot IsXS^aSara^fmes that the presence of IPMPJDescriptor in IOD is used 
tnTJnSm^MACw protectioa However according to MPEG-4 IPMP extension, the 
Panted in the IOD if there is IPMI - protection. These 
m^rillness L inconsistencies may impair the ISMA framework's interoperability 
with MPEG-4 IPMP Extension compatible receivers. 

33 Problem to be solved 

This invention tries to solve the following problems: 

ISMACryp standard defines the signalling of ISMACryp protection by using .MPEG-4 
ffMPtogh the extension of IOD inside SDP. The presence of ffMP DescnptorjnlOD 
SSsS receivers that this media stream is protected. For MPEG ffMP 

IPMPDescriptor. 

unrthermore in order to enable MPEG-4 IPMP Extension compatible receivers to receive 
SSSIJ^^Spfion information, KMS configuration which accompany the 
Sidt ISMAC^ standi extends the IPMP_Descriptoi m IOD with a self-defined 
ISMACryp Descriptor based on the MPEG-4 IPMP standard. Howevei v because o u^ta* 
evoSfof MPEG-4 IPMP standard, the syntax of IOD has changed and been different 
S Z old version that ISMACryp standard based on. This bangs the problem Jto jto 
KMA related data carried in IPMP context might not be recognizable by receivers 
compatible with latest MPEG-4 IPMP Extension standard. In order to keep consistency of 
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1ato . wpp rT .4 rpMp Extension standard while minimizes the changes to ISMA already 

Slu ™ MPEG-4 1PMP Extension standard and the mechanism is backward 
compatible with previous version of MPEG-4 IPMP Extensa standard. 

3.4 Means of Solving the Problems 

To address the signalling problems, this invention defines a .'^f^^SS^m 
the presence of ISMACryp protection in MPEG Initial Object Descriptor a^The tool 
hst and IPMP Descriptors are utilized to signal the protection, This means is compatible 
vXhl ThL Sg-4 IPMP Extension standard, meanwhile provides maximum 
mtop^rabS ^^wTMPEG-system-capable ISMA receiver. It also provides a flexible way 
to identify tools required to play the content. 

-ruio ;„,»«t; rt n defines the mechanisms of carrying and converting ISMACryp 
parameters »Mrau sysre f E ^ ension ffMP Data_BaseClass to carry 

IPMP Stream in order to conform to MPEG-4 IPMP Extension standard. 
3.5 Operation of the Invention 

Within ISMA framework, IOD and OD are constructed. IPMP Tool List Desaipton i are 
embedded ^nto IOD, and IPMP Descriptor Pointers and IPMP Descriptors are embedded 
into IOD and OD if there is ISMACryp protection present. 

Mm rnn ™A OD are conveyed to the ISMA receiver that understands MPEG-4 system via 

Z receiver is aware that there is ISMACryp protection present. Upon detecUon of IPMP 
SSrPohSrand IPMP Descriptor, the receiver can be aware of which stream » 
protected by which tool. 

Within ISMA framework, when a stream is protected by ISMACryp, the ^Cryp 
parameters (for example, cipher identifier) can be carried »J^ryp_D^a and ptfm 
IPMP Descriptor or IPMP Stream, the carnage of the parameters is wwur 



At the receiver side, the parameters for ISMACryp can be retrieved from IPMP I*™*** 
frWm^Za in a MPEG-4 IPMP Extension compatible way. The parameters can then be 
used to configure ISMACryp decryption tool. 



3.6 

3.6.1 IPMP Extension Signaling 
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The current ISMACryp supports SDP IOD signaling for ^-"ly f MPEG receivers. 
ISMA-onlv receivers accept only SDP FMTP signaling parameters but the SDP IOD 
mu^nal a^ MPEG Jriver ft* the stream has ISMACryp protections ^munal 
S Shng). The KMS MAY signal the ISMACryp signaling using only IPMP 
signaling in the SDP IOD (Base IPMP signaling). 

The present document provides the syntax that is compatible with MPEG-4 _ TPMP 
Extensions. With minimum effort, ISMACryp can easi y ^eve <:om P ^bility w.th 
MPEG-4 IPMP Extension, which provides a more flexible protection scheme. 

Minimal IPMP-X Signaling 

IPMP Extension defines an IPMPTool List ^f^^S^i^ 
reauired IPMP Tools in following procession. . According to MPEG-4IPMF extension, 
3S2tDe£*tor should be presented in the IOD if there is IPMP pro ect»on. So 

PMP-X Signalingfwe suggest to use IPMP Tool L,st Descnptor m IOD 
instead of the IPMP Descriptor to achieve this purpose. 

According to the current ISMACryp specification, ^^^ ec ^ es ^. e ^ C 2T^^gQ^ 
KMS information transportation, at least two tools should be presen ^» Ite MTO 
TPMP Tool List Descriptor. The first one is the KMS tool, and the other is the ISMA 

presence of ISMACryp tool in MPEG IPMP Tool List signals the 
ISMACryp protection. 



An example of the Tool List Descriptor with ISMACryp tools is given below. 




isAltGroup 



isParametric 



128 



The value assigned by each service 
provider to their KMS tool 



reserved 



Size of the tool URL 



Tool URL 



IPMP_Tool 



ObOQOO.OO 



IPMP ToolTag 



Descriptor size 



IPMP_ToollD 



■isAltGroup 
isParametric 



The value assigned to the ISMA 
decryption tool 
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18 



reserved 



SiTRofthetool URL 



Tool URL 



IPMP Tool List is depicted in MPEG-4 IPMP Extension 



content structure shown in 



Fisure 2 Using IPMP Tool List (2. 1) not only facilitates the sgnahng of the presence^ of 
KcTryp protection, but also allows a great flexibiHty ofident^mg ^ls AnffMP 
oolt the tool list can be identified in three ways. The first is to use a fixed 28 tat 
IPMP t£2d (2.2), value assigned by a registration authority. The second u tc use a list 
of MP ToolTOs to indicate the Tools that are equivalent a lternatives to^ «tar^ 
By dolg so, a terminal can have more flexibility to chooseitsown ool Ttefart oneisto 
Z to ptametric description to describe a criteria that m 
Ms case, a terminal can have more freedom to choose a tool to perform the reqmred 
function 



For the MPEG-systems-capable receiver, more IPMP information is required for IPMP 
fortmo^X^ 

introduced in section 2, they provide the base information ^^MTEG 
compatible receiver. For encrypted elementary streams, their correspondmg ES 
Sscriptors MUST contain the following IPMP.DescnptorPomten 



Descriptor Name 



8 



_8 



8 



IPMP DescriptorPointertag 10_ 



~JpMP DescriPtorPointer 



descri ptor size 



IPMP DescriPtorlD 



OxFF 



IPMPX DescriPtorlD 



IPMP ES ID 



0x0002 / 0x0003 



0x0000 



The concept of this IPMP Extension protection signaling is shown in Figure £ The 
presence of this descriptor pointer (3.1 and 3.2) in an ES Descript or <£ ' £ 
stream associated with this descriptor is subj ect to protection and ™* 
IPMP Tool specified in the referenced IPMP.Descnptor (3.3 and 3.4). This referenced 
IPMP_Descriptor should be carried in the Object Descriptor. 



Descriptor Name 



|IPMP Descriptor 



IPMP Descriptor tag 
descriptor size 
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3 
5 
6 


8 
16 
16 
128 


IPMP nescriptorlD 
IPMPS Type 
IPMP DescriptorlDEx 
IPMP_ToollD 


OxFF 

OxFFFF 

0x0002/0x0003 

The value assigned to the ISMA 

<jorryptinn tool 


7 
8 


8 
8 


ControlPointCode 
SequenceCode 


6x01 (between the decode buffer 

and the decoded 

0x80 



Also the IOD must contain the Mowing IPMP.DescriptorPointer. *te**towg 
^amptittelkthat the specific DRM tool (Key Management System) md.oated m the 
referenced descriptor must be instantiated at a global scope: 



Descri ptor Name 



IPMP DescriptorPointertag 
descriptor size 



nescri ptorPointer 

HO 



IPMP DescriPtorlD 



jfi iPMP DescriptorlDEx 
" 16|lPMP ESJD 



OxFF 



0x0001 



0x0000 



Th* ahnve IPMP DescriptorPointer points to a IPMP_Descriptor whose 
wm D^oTm^Tmi. Then the specified IPMP descriptor must be 
P^SSTonote for the KMS, the descriptor's s controlPoint should be set to 0x00 
to indicate a global scope. 




3.6.2 Carriage of ISMACryp data in an IPMP Extension compatible way 

ISMACryp uses a set of parameters to describe the encryption of the sU^^norderto 
carry parameters carried in an IPMP Extension compatible way, an ISMACryp_Data can 

7 
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be extended from the 1PMP-X defined IPMPJJataJBaseClass. IPMP_Data_BaseClass is 
defined in MPEG-4 IPMPX as shown below: 

abstract align e d<8) expandable<2*28-l> class IPMPJOataJiaseClass: 
bit (8) tag=0 255 

{ bit (8) Version; 
bit (32) datalD; 

// Fields and data extending this message. 



ISMACryp Data can extend from the above base class using a user-defined tag. The data 
can then have its own set of fields to carry the parameters. This can ensure 
interoperability of different ISMA terminals interpreting the same content stream. 

This ISMACrvn Data can be carried in two places in a standard way. The first is to carry 
iSSSSSSS. The example of an IPMP Descriptor with this ISMACryp_Data ,s 
shown below: 



Descrip 
Field 
No. 


or Name 
Size in 
Bits 


Field Name 


Value 






IIPMP Descriptor 


11 


1 
2 
3 


8 
8 
8 


PMP Descriptor taa 

descriptor size 

IPMP DescriptorlD 


OS 

nvPP 


4 
5 


16 
16 


IPMPS Tvpe 

IPMP DescriptorlDEx 


HvFFPF 

0x0002 / 0x0003 


6 


128 


IPMP_ToollD 


The value assigned to the ISMA 
decryption tool 


7 


8 


ControlPointCode 


0x01 (between the decode buffer 

and the decoder) 

nv«n 


8 


8 


SequenceCode 

|ISMACrvP_J*»tt 


> 

to be defined 


7 
8 


8 
8 


ISMACrvo DataTaa 
data size 


20 

Cipher identifier 


9 
11 


— s 


Cioher-suite 
IV-lenath 


Bvte length of the initialization vector 
Bvte tenqth of the IV on an AU basis 


12 
13 


2 

1 


Delta-IV-lenath 
Selective-encryption 


1 if selective encryption is used 


14 


1 


Key-indicator-per-Au 


1 if multiple key indicators appear in 
a packet 


1£ 


£ 


Kev-indicator-lenath 


Bvte length of the key indicator 



The second way to carry the ISMACryp_Data is to carry it as a payload 
IPMP_Message which is subsequently carried in IPMP Stream as defined in MPEG-4 
IPMPlExtension. 
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aligned<8) expandable (2 !e -l) class IPMPJfessage 

bit (16) IPMPSJType; 
if (IPMPSJType == 0) 

bit (8) ura,String[sizeOfInstance-2]; 

else (if (IPMPSJType — 0x0001} 

bit (16) IPMP DescriptorlD; 

IPMPJ3ataJ3aseClass IPMP_ExtendedData [ ] 

6 bit (8) IBMP_data [ sizeOf Instance-2] ; 



The following example shows the syntax of the IPMP.Message when it carries 
S^C^ IPMP tool specified in the IPMP Descriptor with tins 

IPMPJDescriptorlDEx is the destination of theIPMP_Message. 



Field Size in 



message size 
IPMPS Type 



IPMP DescriptorlDEx 



8 



8 



0x0001 



llSMACryp_Pata 



ISMACryp PataTag _ 



to be defined 



data size 



20 



Cipher-suite 



IV-length 



Cipher identifier 



Delta-lV-length 



\jljJ\ IPI IWIWI IUIIXI 

Byte length of the initialization vector 



Selective-encryption 



Key-indicator-per-Au 



8|Key-indicator-length~ 



Byte length nfjhej yon an AU basis 
T if selective encryption is used 



if multiple key indicators appear in 
a packet 



Bvte length of the kev indicator 



3.7 Effects of Invention 

The invention uses the tool list in IOD and IPMP Descriptors in OD to signal ISMACryp 
pSeSr, By doing so, the signalling method can be made flexible, and cn be, *dy 
SSble with the latest MPEG-4 IPMP Extension standard, hence makes the MPEG- 
system-capable ISMA receivers interoperable. 

This invention also creates an ISMACryp_Data extending ^^-^^^ 
The invented ISMACryp Data can be used to carry the ISMACryp parameters, and 
2 se4 3y be came7either in IPMP Descriptor or IPMP Stream. The carnage of 
ISMACryp parameters now become MPEG-4 IPMP Extension compliant. 
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4 BRIEF DESCRIPTION OF THE DRAWINGS 

Figure 1 shows ISMACryp Architecture 

Figure 2 shows the MPEG-4 IPMP Extension content structure. 

Figure 3 shows the protection signaling using IPMP Descriptor 
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Figure 1: ISMACryp Architecture 
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IPMP Control Graph 
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Control IPMP 
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( Key Data ) 



( Rights Data ) 



r Tool init Data ) 



Figure 2: MPEG-4 IPMP Extension content structure. 
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Figure 3: Protection signaling using IPMP Descriptor 



004-3050090 



#M2 0 0 3-1 31372 ^"^ 

6 ABSTRACT 

This invention defines a signalling mechanism to signal *e presence of ^SMAGyp 

prelection m MPEG Initial Object Descriptor 0OD). *^ 

fte^crintors to signal protection. This mechanism is compatible with tite latest 

SKnSon S/ar4 *> allow maximum interoperabihty with M^EG-system-capable 

^SSta^proVidesaflexibk 

(Fig.D 
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